CVE-2025-6202: Phoenix: Rowhammer attack on Hynix DDR5 devices

Severity: high (CVSS 7.1 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-09-15 · updated 2026-06-17
Weakness: CWE-404

Description

Vulnerability in SK Hynix DDR5 on x86 allows a local attacker to trigger Rowhammer bit flips impacting the Hardware Integrity and the system's security. This issue affects DDR5: DIMMs produced from 2021-1 until 2024-12.

Affected products

SK Hynix DDR5: DIMMs produced from 2021-1 until 2024-12

References

https://comsec.ethz.ch/phoenix
https://security.googleblog.com/2025/09/supporting-rowhammer-research-to.html

Get alerted when CVE-2025-6202 or the next vulnerability affects your stack